The Agent Skills Directory

[SAFE]: The skill provides instructional content and YAML templates for GitHub Actions and Azure DevOps that adhere to standard security practices.
[EXTERNAL_DOWNLOADS]: The skill references several official GitHub Actions, including actions/checkout, actions/setup-dotnet, actions/upload-artifact, docker/login-action, and docker/build-push-action. These are well-known services provided by GitHub and Docker and are considered safe for inclusion in CI/CD workflows.
[CREDENTIALS_UNSAFE]: The skill demonstrates safe credential handling by using pipeline secret syntax (e.g., ${{ secrets.GITHUB_TOKEN }}, ${{ secrets.NUGET_API_KEY }}) and includes an anti-pattern section that explicitly warns users against hardcoding database passwords or other sensitive information directly in pipeline files.

ci-cd